Zoals algemeen bekend is de ASK toolbar een 'dubieuze' toolbar' die bij allerlei installaties van gratis software is toegevoegd zoals laatst ook bij Avira Antivir Free! Maar nu dus ook bij de laatste update van Java?
Vink bij het installeren van een update van Java dus altijd de optionele toolbar uit "Install the Ask Toolbar ans make Ask my default search provider".Niet alleen zal er een toolbar geïnstalleerd worden maar ook de standaard ingestelde zoekmachine zal worden aangepast naar Ask.
Technische details
HijackThis
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
Register
[HKEY_CLASSES_ROOT\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}]
@="GenericAskToolbar"
[HKEY_CLASSES_ROOT\AppID\GenericAskToolbar.DLL]
"AppID"="{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}"
[HKEY_CLASSES_ROOT\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\InprocServer32]
@="C:\\Program Files\\Ask.com\\GenericAskToolbar.dll"
"ThreadingModel"="Apartment"
[HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}]
@="Ask Toolbar"
[HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\InprocServer32]
@="C:\\Program Files\\Ask.com\\GenericAskToolbar.dll"
"ThreadingModel"="Apartment"
[HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ProgID]
@="GenericAskToolbar.ToolbarWnd.1"
[HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\Programmable]
[HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\TypeLib]
@="{2996F0E7-292B-4CAE-893F-47B8B1C05B56}"
[HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\VersionIndependentProgID]
@="GenericAskToolbar.ToolbarWnd"
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
@="Ask Toolbar"
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1\CLSID]
@="{D4027C7F-154A-4066-A1AD-4243D8127440}"
[HKEY_CLASSES_ROOT\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF]
"ProductName"="Ask Toolbar"
"PackageCode"="3301FF1F77910C449A6D9BBC23E88B95"
"Language"=dword:00000000
"Version"=dword:010c0003
"Transforms"=hex(2):43,00,3a,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,\
00,5c,00,49,00,6e,00,73,00,74,00,61,00,6c,00,6c,00,65,00,72,00,5c,00,7b,00,\
38,00,36,00,44,00,34,00,42,00,38,00,32,00,41,00,2d,00,41,00,42,00,45,00,44,\
00,2d,00,34,00,34,00,32,00,41,00,2d,00,42,00,45,00,38,00,36,00,2d,00,39,00,\
36,00,33,00,35,00,37,00,42,00,37,00,30,00,46,00,34,00,46,00,45,00,7d,00,5c,\
00,31,00,30,00,33,00,33,00,2e,00,4d,00,53,00,54,00,00,00
"Assignment"=dword:00000001
"AdvertiseFlags"=dword:00000184
"ProductIcon"="C:\\Windows\\Installer\\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\\ARPPRODUCTICON.exe"
"InstanceType"=dword:00000000
"AuthorizedLUAApp"=dword:00000000
"DeploymentFlags"=dword:00000002
"Clients"=hex(7):3a,00,00,00,00,00
[HKEY_CLASSES_ROOT\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF\SourceList]
"PackageName"="Ask Toolbar.msi"
"LastUsedSource"=hex(2):6e,00,3b,00,31,00,3b,00,43,00,3a,00,5c,00,55,00,73,00,\
65,00,72,00,73,00,5c,00,47,00,45,00,42,00,52,00,55,00,49,00,7e,00,31,00,5c,\
00,41,00,70,00,70,00,44,00,61,00,74,00,61,00,5c,00,4c,00,6f,00,63,00,61,00,\
6c,00,5c,00,54,00,65,00,6d,00,70,00,5c,00,7b,00,37,00,46,00,45,00,34,00,34,\
00,42,00,36,00,46,00,2d,00,30,00,36,00,43,00,46,00,2d,00,34,00,32,00,35,00,\
43,00,2d,00,39,00,33,00,32,00,34,00,2d,00,38,00,33,00,35,00,46,00,45,00,32,\
00,34,00,41,00,45,00,37,00,46,00,37,00,7d,00,5c,00,00,00
[HKEY_CLASSES_ROOT\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF\SourceList\Media]
"DiskPrompt"="[1]"
"1"="DISK1;1"
[HKEY_CLASSES_ROOT\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF\SourceList\Net]
"1"=hex(2):43,00,3a,00,5c,00,55,00,73,00,65,00,72,00,73,00,5c,00,47,00,45,00,\
42,00,52,00,55,00,49,00,7e,00,31,00,5c,00,41,00,70,00,70,00,44,00,61,00,74,\
00,61,00,5c,00,4c,00,6f,00,63,00,61,00,6c,00,5c,00,54,00,65,00,6d,00,70,00,\
5c,00,7b,00,37,00,46,00,45,00,34,00,34,00,42,00,36,00,46,00,2d,00,30,00,36,\
00,43,00,46,00,2d,00,34,00,32,00,35,00,43,00,2d,00,39,00,33,00,32,00,34,00,\
2d,00,38,00,33,00,35,00,46,00,45,00,32,00,34,00,41,00,45,00,37,00,46,00,37,\
00,7d,00,5c,00,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}]
@="Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\InprocServer32]
@="C:\\Program Files\\Ask.com\\GenericAskToolbar.dll"
"ThreadingModel"="Apartment"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ProgID]
@="GenericAskToolbar.ToolbarWnd.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\Programmable]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\TypeLib]
@="{2996F0E7-292B-4CAE-893F-47B8B1C05B56}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\VersionIndependentProgID]
@="GenericAskToolbar.ToolbarWnd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
@="Ask Toolbar BHO"
"NoExplorer"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"=""
"DisplayVersion"="1.12.3.0"
"HelpLink"=hex(2):68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,61,00,62,00,6f,00,\
75,00,74,00,2e,00,61,00,73,00,6b,00,2e,00,63,00,6f,00,6d,00,2f,00,65,00,6e,\
00,2f,00,64,00,6f,00,63,00,73,00,2f,00,61,00,62,00,6f,00,75,00,74,00,2f,00,\
69,00,6e,00,64,00,65,00,78,00,2e,00,73,00,68,00,74,00,6d,00,6c,00,00,00
"HelpTelephone"=""
"InstallDate"="20110723"
"InstallLocation"="C:\\Program Files\\Ask.com\\"
"InstallSource"="C:\\Users\\GEBRUI~1\\AppData\\Local\\Temp\\{7FE44B6F-06CF-425C-9324-835FE24AE7F7}\\"
"ModifyPath"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,\
00,65,00,20,00,2f,00,58,00,7b,00,38,00,36,00,44,00,34,00,42,00,38,00,32,00,\
41,00,2d,00,41,00,42,00,45,00,44,00,2d,00,34,00,34,00,32,00,41,00,2d,00,42,\
00,45,00,38,00,36,00,2d,00,39,00,36,00,33,00,35,00,37,00,42,00,37,00,30,00,\
46,00,34,00,46,00,45,00,7d,00,00,00
"NoModify"=dword:00000001
"NoRepair"=dword:00000001
"Publisher"="Ask.com"
"Readme"=""
"Size"=""
"EstimatedSize"=dword:00000b28
"UninstallString"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\
78,00,65,00,20,00,2f,00,58,00,7b,00,38,00,36,00,44,00,34,00,42,00,38,00,32,\
00,41,00,2d,00,41,00,42,00,45,00,44,00,2d,00,34,00,34,00,32,00,41,00,2d,00,\
42,00,45,00,38,00,36,00,2d,00,39,00,36,00,33,00,35,00,37,00,42,00,37,00,30,\
00,46,00,34,00,46,00,45,00,7d,00,00,00
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"=dword:00000001
"VersionMinor"=dword:0000000c
"WindowsInstaller"=dword:00000001
"Version"=dword:010c0003
"Language"=dword:00000000
"DisplayName"="Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B5D655C3-BF79-4C38-8BDF-4432FF705CA5}]
"Path"="\\Scheduled Update for Ask Toolbar"
"Triggers"=hex:15,00,00,00,00,00,00,00,01,7f,50,01,c8,7f,50,01,00,be,27,1e,fa,\
ef,c4,01,01,7f,50,01,c8,7f,50,01,00,be,06,f4,3a,56,e1,01,38,21,41,01,48,48,\
48,48,71,5a,e9,23,48,48,48,48,00,48,48,48,48,48,48,48,00,48,48,48,48,48,48,\
48,01,00,00,00,48,48,48,48,1c,00,00,00,48,48,48,48,01,05,00,00,00,00,00,05,\
15,00,00,00,70,18,5f,f1,8c,72,66,98,24,28,7e,c6,e9,03,00,00,48,48,48,48,20,\
00,00,00,48,48,48,48,50,00,36,00,36,00,30,00,30,00,5c,00,47,00,65,00,62,00,\
72,00,75,00,69,00,6b,00,65,00,72,00,00,00,38,00,00,00,48,48,48,48,58,02,00,\
00,10,0e,00,00,80,f4,03,00,ff,ff,ff,ff,07,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a8,77,91,00,00,00,00,00,00,\
00,00,00,dd,dd,00,00,00,00,00,00,01,7f,50,01,c8,7f,50,01,00,be,27,1e,fa,ef,\
c4,01,01,7f,50,01,c8,7f,50,01,00,be,06,f4,3a,56,e1,01,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,10,0e,00,00,80,51,01,00,ff,ff,ff,ff,01,00,00,00,\
01,00,00,00,00,00,00,00,00,01,03,01,01,00,00,00,00,00,00,00,27,00,00,00
"DynamicInfo"=hex:03,00,00,00,39,11,cd,cf,4b,49,cc,01,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar]
"Id"="{B5D655C3-BF79-4C38-8BDF-4432FF705CA5}"
"Index"=dword:00000003